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Pseudorandom number sequences are useful in many applications such as simulations of physical systems (Ex- 
ample: Binder and Heermann[1], and Senate|2]), entertainment (Example: Wegenkittl[3]), computer simulation 
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Abstract 

Based on the Golomb’s pseudorandomness assumptions on idea pseudorandom sequences and FIPS 140-2 
pseudorandomness test, this paper first presents a new approach for improving the pseudorandomness of 
pseudorandom sequences. Second, using a generalized synchronization theorem, and three chaotic maps con- 
structs one 8-dimensional chaotic generalized synchronization system (8DCGSS). Then using the 8DCGSS 
designs a chaotic pseudorandom number generator (CPRNG). The keyspace of the CPRNG is larger than 
21117. Third, using FIPS 140-2 pseudorandomness test criterions and generalized FIPS 140-2 pseudorandom- 
ness test criterions measures, respectively, the pseudorandomness of the keystreams with length 20 000, 100 
000 and 1 000 000 generated via the CPRNG, an Matlab PRNG, an RC4 algorithm, and an m-sequence 
with period 22° — 1, and the corresponding improved keystreams by our approach. The results show that 
the presented approach can increase significantly the pseudorandomness of the keystreams generated by the 
four PRNGs. The key streams generated by the m-sequence do not have sound pseudorandomness when the 
lengths of the key streams are less than 100 000. 
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Introduction 


(Example: Knuth[4]), stochastic optimization methods (such as simulated annealing), watermarking for image 
authentication and particularly cryptography (Example: Ferguson[5]). 

The randomness of idea pseudorandom number sequences should satisfy Golomb's assumptions Golomb|[6]. 
That a Poor PRNG generates low quality pseudorandom number sequences will be harmful, especially leak the 
prevented information in secrete information transformations. 

Statistical tests on PRNGs play a fundamental role in measuring certain properties of pseudorandom number 
sequences. FIPS 140-2 pseudorandomness test criterions introduced by the National Institute of Standards and 
Technology (NIST) of the USA ([7]) is a well-known public-domain statistical testing packages for PRNGs. 

Hight quality pseudorandom number sequences are very useful in different fields. In aim to obtain better 
pseudorandom sequence sources, this paper presents a new approach for improving the randomness of pseu- 
dorandom sequences base on the Golomb's idea pseudorandom sequence assumptions [6] and the FIPS 140-2 
pseudorandomness test criterions. Using a generalized synchronization theorem Zang et al.[8] and the Henon 
map, the logistic map and a tube map (Yang et al.[10]) constructs a new 8-dimensional chaotic generalized 
synchronization system (8DCGSS). Then using the SDCGSS designs a CPRNG. Third, using FIPS 140-2 pseu- 
dorandomness test criterion and generalized FIPS 140-2 (GFIPS 140-2) pseudorandomness test criterions Min 
et al.[9] measures the pseudorandomness of the keystreams with length 20 000 generated by the CPRNG, 

san Matlab PRNG, an RC4 algorithm, and an m-sequence with period 27° - 1, and measures the improved 
—keystreams via our approach. Then using the two randomness test criterions measures the pseudorandomness 
^-of the keystreams with length 100 000 and length 10 00 000 generated by the four PRNGS, and the corre- 
e ponding improved keystreams by our approach, respectively. The results show that the presented approach 
: can increase significantly the pseudorandomness of the keystreams generated by the four PRNGs. The key 
streams generated the m-sequence with period 229 — 1 do not have sound pseudorandomness in the meanings 
—of the Golomb's pseudorandomness assumptions when the lengths of the key streams are less than 100 000. 
The rest of the paper is organized as follows. Section 2 proposes the approach for improving pseudoran- 
©\domness of pseudorandom sequences. Section 3 is divided to three subsections. Subsection 3.1 presents a new 
* 8DCGSS. Subsection 3.2 designs a CPRNG based on the 8DCGSS. Subsection 3.3 introduces the GFIPS 140-2, 
Aand uses FIPS 140-2 test and GFIPS 140-2 test measures the pseudorandomness of the keystreams with 20 000 
= bit lengths generated via the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-sequence, and the 
. corresponding improved keystreams via our approach. Subsections 3.4 and 3.5 use the methods in Subsection 
2*9.3 to study the pseudorandomness of the key streams with 100 000 bit and 1 000 000 bit lengths generated 
by the four PRNGs, respectively. Finally, some concluding remarks are presented in Section 4. 


r 2 An approach for improving pseudorandomness of pseudorandom se- 
quences 


Based on the Golomb's assumptions on the randomness that pseudorandom sequences should satisfy [6] and 
FIPS 140-2 randomness test criteria, this section proposes an approach for improving the randomness of 
pseudorandom sequences. 

Now using a sequence S with length l of 20 000 bits as an example describes our approach. This approach 
consists of eight steps: 

(1) Improving the balance property of S. According to the Golomb's assumption, an idea pseudoran- 
dom sequence with even length l should have 1/2 zeros and 1/2 ones. Denote the numbers of the 0’s and the 
1’s in S by lg and l4, respectively. 

(a) If d 2 lg — lı > 0. Denote m = fizx(lo/ fix(d/2)), where fix is a Matlab command that fix(X) rounds 
the elements of X to the nearest integers towards zero. Then substitute continuously 0’s to 1’s by m interval 
in the sequence S until all absent 1’s have been supplied. 


(b) £d = I4 — lo > 0. Denote m = fix(l;/ fix(d/2)). Then substitute continuously 1’s to 0’s by m interval 
in the sequence S until all absent 0's have been supplied. 

(2) Improving the uniformity of 1-runs. 

Denote lo and lı to be the numbers of 0’s 1-runs and 1’s 1-runs , respectively. 

(a) If d = lo — 2500 > 0. Find the segments which have the following forms: 


J01 — [1011011], J02 — [1101101]. (1) 


Denote do to be the number of forms (1) and m = f'ix(2do/d). Then replace continuously segments (1) to the 
forms: 


D01 = [1001111], D02 = [1111001] (2) 


by interval m until all excess 0’s have been deleted. 
(b) If d = 2500 — lo > 0. Find the segments which have the following forms: 


J01 = [1001111], J02 = [1111001]. (3) 


S Denote do to be the number of forms (3) and m = fix(2d9/d). Then replace continuously segments (3) to the 


COO forms: 


D01 = [1011011], D02 = [1101101] (4) 


"by interval m until all absent 0’s have been supplied. 
(c) If d = 1, — 2500 > 0. Find the segments which have the following forms: 


J11 = [0100100], J12 = [0010010] (5) 
C2 Denote dı to be the number of forms (5) and m = fix(2d,/d). Then replace continuously segments (5) to the 
= «forms: 
D11 = [0110000], D12 = [0000110] (6) 
= by interval m until all excess 1’s have been supplied.. (d) If d = 2500 — lı > 0. Find the segments which 
have the following forms: 
J11 = [0110000], J12 = [0000110]. (7) 


Denote d; to be the number of forms (7) and m = f'ix(2di/d). Then replace continuously segments (7) to the 
forms: 


D11 = [0100100], D12 = [0010010] (8) 


by interval m until all absent 1’s have been supplied.. 
Remark: Practically, we can always find enough Jij's defined by (1), (3), (5) and (7). 
(3) Improving the uniformity of 2-runs. 


Denote lo and lı to be the numbers of 0’s 2-runs and 1’s 2-runs , respectively. 
(a) If d = lo — 1250 > 1. Find the segments which have the following forms: 


J01 = [100100001], 702 = [100001001]. (9) 


Denote do to be the number of forms (9) and m = fix(do/d). Then replace continuously segments (9) to the 
forms: 


D01 — [100010001], D02 — [100010001] (10) 


by interval m until all excess 0’s 2-runs have been delete if possible. If there do not exit enough JO1’s and J02’s 
defined by (9) to reduce the number of zero 2-runs, we need to find the segments which have the following 
forms: 


J03 = [11100111001], 04 = [10011100111] (11) 
and then change continuously them to the forms: 
D03 — [11111100001], D04 — [10000111111] (12) 


until all surplus zero 2-runs have been deleted if possible. 
(b) If d = 1250 — lo > 1. Find the segments which have the following form: 


JO1 == [100010001]. (13) 
C -Denote do to be the number of forms (13) and m = fix(do/d). Then replace continuously segments (13) to the 
—form: 


D01 = [100100001] (14) 


* by interval m until all absent zero 2-runs have been supplied if possible. If we cannot find enough JO01's defined 
A by (13) to reduce the number of zero 2-runs, we need to find the continuously segments which have the following 
forms: 


J02 = [11111100001], J03 = [10000111111] (15) 
` ‘and then change continuously them to the forms: 
D02 = [11100111001], D03 = [10011100111] (16) 


: until all absent zero 2-runs have been generated if possible. 
(c) If d = l — 1250 > 1. Find the segments which have the following form: 


J11 = [011011110], 712 = [011110110]. (17) 


Denote d; to be the number of forms (17) and m = fix(d,/d). Then replace continuously segments (17) to the 
form: 


D11 — [011101110], D12 — [011101110] (18) 


by interval m until all excess one 2-runs have been deleted if possible. . If we cannot find enough JO1’s and 
J02’s defined by (17) to reduce the number of one 2-runs, we need to find the segments which have the following 
forms: 


J13 = [00011000110], J14 = [01100011000] (19) 


and then change continuously them to the forms: 
D11 = [00000011110], D12 = [00001111000] (20) 


until all surplus one 2-runs have been deleted if possible. 
(d) If d = 1250 — lı > 1. Find the segments which have the following form: 


J11 == [0111011110], (21) 


Denote dı to be the number of form (21) and m = fix(d,/d). Then replace continuously segments (21) to the 
form: 


D11 — [011011110] (22) 


by interval m until all absent one 2-runs have been generated if possible. If we cannot find enough JO01's defined 
by (21) to increase the number of one 2-runs, we need to find the segments which have the following forms: 


J12 = [00000011110]; J13 = [01111000000], (23) 
Gc ) and then change continuously them into the forms: 


D12 = [00011000110], D13 = [01100011000] (24) 


ja "until all absent one 2-runs have been generated if possible. 
(4) Improving the uniformity of 3-runs. 


Denote lo and l4 to be the numbers of zero 3-runs and one 3-runs , respectively. 
(a) If d = lg — 625 > 1. Find the segments which have the following forms: 


J01 = [10001000001], 702 = [10000010001]. (25) 


- Denote do to be the number of form (25) and m = fia(do/d). Then replace continuously segments (25) to the 
© form: 


D01 = [10000100001], D02 = [10000100001] (26) 


j ^by interval m until all excess zero 3-runs have been generated if possible. If we cannot find enough JO1’s 
and J02's defined by (25) to reduce the number of zero 3-runs, we need to find the segments which have the 
following forms: 


J03 — [111100011110001], J04 — [100011110001111], (27) 
and then change continuously them into the forms: 
D03 — [111111110000001], D04 — [100000011111111] (28) 


until all surplus zero 3-runs have been deleted if possible. 
(b) If d = 625 — lg > 1. Find the segments which have the following form: 


J01 — [10000100001]. (29) 


Denote do to be the number of form (29) and m = f'ix(do/d). Then replace continuously segments (29) to the 
form: 


D01 — [10001000001] (30) 


by interval m until all absent zero 3-runs have been generated if possible. If we cannot find enough JO1’s 
defined by (29) to increase the number of zero 3-runs, we need to find the segments which have the following 
forms: 


J02 — [111111110000001], 703 — [100000011111111] (31) 
and then change continuously them to the forms: 
D02 = [100011110001111]; D03 = [100011100011111], (32) 


until all absent zero 3-runs have been generated if possible. 
(c) If d = l — 625 > 1. Find the segments which have the following form: 


JO1 = [01110111110], J02 = [01111101110] (33) 
Denote dı to be the number of form (33) and m = fix(d,/d). Then replace continuosly segments (33) to the 
—form: 


D01 = [01111011110], D02 = [01111011110] (34) 


T by interval m until all surplus one 3-runs have been deleted if possible. If we cannot find enough J01's and 
> :J02's defined by (33) to reduce the number of one 3-runs, we need to find the segments which have the following 
forms: 


J04 = [111111110000001], JO5 = [100000011111111] (35) 
» ‘and then change continuously them to the forms: 
D03 = [100011110001111]; D04 = [100011100011111], (36) 


: until all surplus one 3-runs have been deleted if possible. 
(d) If d = 625 — lı > 1. Find the segments which have the following form: 


J01 == [01111011110]. (37) 


Denote d; to be the number of form (37) and m = fix(d,/d). Then replace continupusly segments (37) to the 
form: 


D01 — [01110111110] (38) 


by interval m until all absent one 3-runs have been generated if possible. If there do not exit enough JO1’s 
defined by (37) to increase the number of one 3-runs, we need to find the segments which have the following 
form: 


J02 = [11111111000000], J03 = [00000011111111], (39) 


and then change continuously them to the forms: 
D02 = [11110001111000], D03 = [00011110001111], (40) 


until all absent one 3-runs have been generated if possible. 
(5) Improving the uniformity of 4-runs. 


Denote lo and l4 to be the numbers of zero 4-runs and one 4-runs, respectively. 
(a) If d = lo — 313 > 1. Find the segments which have the following form: 


J01 = [1000010000001], J02 = [1000000100001], . (41) 


Denote do to be the number of form (41) and m = fix(do/d). Then replace continuously segments (41) to the 
form: 


D01 = [1000001000001]; D02 = [1000001000001], (42) 


by interval m until all surplus zero 4-runs have been deleted if possible. If we cannot find enough JO1’s and 
J02’s defined by (41) to reduce the number of zero 4-runs, we need to find continuously segments which have 


N the following forms: 


J03 = [1111100001111100001]; , 04 = [1000011111000011111] (43) 
- and then change them to the forms: 
D03 = |1111111111000000001], D04 = [1000000001111111111] (44) 


- until all surplus zero 4-runs have been deleted if possible. 
(b) If d = 313 — lo > 1. Find the segments which have the following form: 


JO1 = [1000001000001]. (45) 
» Denote do to be the number of form (45) and m = fix(do/d). Then replace segments (45) to the form: 
| D01 = [1000010000001] (46) 


E : by m interval. If we cannot find enough J01’s defined by (45) to increase the number of zero 4-runs. In this 
© case, we need to find continuously segments which have the following forms: 


J02 — [1111111111000000001], J03 — [1000000001111111111] (47) 
and then change them to the form: 
D02 = {1111100001111100001], D03 = [1000011111000011111] (48) 


until all absent zero 4-runs have been supplied if possible. 
(c) If d= 1, — 313 > 1. Find the segments which have the following forms: 


JO1 = [0111101111110], J02 = [0111111011110]. (49) 


Denote d; to be the number of form (49) and m = fix(d,/d). Then replace continuously segments (49) to the 
forms: 


D01 = [0111110111110], D02 = [0111110111110] (50) 


by interval m until all surplus one 4-runs have been deleted if possible. If we cannot find enough JO1’s and 
J02's defined by (49) to reduce the number of one 4-runs, we need to find continuously segments which have 
the following forms: 


J03 = [0000011110000011110], 704 = [0111100000111100000] (51) 
and then change them to the forms: 
D03 = [0000000000111111110], D04 = [0111111110000000000] (52) 


until all surplus one 4-runs have been deleted if possible. 
(d) If d = 313 — 1, > 1. Find the segments which have the following form: 


J11 == [0111110111110]. (53) 


Denote d; to be the number of form (53) and m = fizx(d;/d). Then replace continuously segments (53) to the 
form: 


D11 = [0111101111110]. (54) 


CO: we cannot find enough J11’s defined by (53) to increase the number of one 4-runs, we need to find the 
segments which have the following forms: 


C J12 = [0000000000111111110], 713 = [0111111110000000000] (55) 
And then change continuously them to the form: 
D12 = [0000011110000011110], D13 = [0111100000111100000] (56) 


C until all absent one 4-runs have been generated if possible. 
(6) Improving the uniformity of 5-runs. 


Denote lo and 1; to be the numbers of zero 5-runs and one 5-runs, respectively. 
(a) If d = lo — 156 > 1. Find the segments which have the following forms: 


J01 = [10000010000000], J02 = [00000001000001]. (57) 


“Denote do to be the number of form (57) and m = fix(do/d). Then replace continuously segments (57) to the 
forms: 


D01 — [10000001000000], D02 — [00000010000001] (58) 


by interval m until all excess zero 5-runs have been deleted if possible. If we cannot find enough JO1’s and 
J02’s defined by (57) to reduce the number of zero 5-runs, we need to find continuously the segments which 
have the following forms: 


J03 — [100000110000000], J04 — [000000011000001] (59) 


Denote doo to be the number of form (59) and mı = fix(doo/(d — do)). Then replace continuously segments 
(59) to the forms: 


D03 — [00000011000000], D04 — [000000110000001] (60) 


by interval m4 until all surplus zero 5-runs have been deleted if possible. If we cannot find enough J03's and 
J04’s defined by (59) to reduce the number of zero 5-runs, we need to find continuously the segments which 
have the following forms: 


J05 = [100000110000000], J06 = [000000011000001]. (61) 


Denote dogo to be the number of form (61) and mz = fix(doo0/(d — do — doo)). Then replace continuously 
segments (61) to the forms: 


D05 — [100000011000000], D06 — [000000110000001] (62) 


by interval m» until all surplus zero 5-runs have been deleted if possible. If we cannot find enough J05's and 
J06’s defined by (61) to reduce the number of zero 5-runs, we need to find continuously the segments which 
have the following form: 


J07 = [1000001000001], (63) 


Denote doooo to be the number of form (63) and m3 = fix(2doo00/(d — do — doo — dooo)). Then replace 
F continuously segments (63) to the form: 


D07 = [11000001000001] (64) 


C 5 by interval mg until all surplus zero 5-runs have been deleted if possible. 
(b) If d= 156 — lo > 1. Find the segments which have the following forms: 


J01 = [10000001000000], J02 = [00000010000001]. (65) 


! N Denote do to be the number of form (65) and m = fix(do/d). Then replace continuously segments (65) to the 


C w forms: 
D01 = [10000010000000], D02 = [00000001000001] (66) 


t . by interval m until all absent zero 5-runs have been supplied if possible. If we cannot find enough J01's and 
>< J02's defined by (65) to increase the number of zero 5-runs., we need to find continuously segments which have 


CO the following forms: 


J03 = [100000011000000], J04 = [000000110000001]. (67) 


Denote doo to be the number of form (67) and mı = fix(doo/(d — do)). Then replace continuously segments 
(67) to the forms:: 


D03 — [100000110000000], D04 — [000000011000001] (68) 


by interval m4 until all absent zero 5-runs have been generated if possible. If we cannot find enough J03's and 
J04’s defined by (67) to increase the number of zero 5-runs, we need to find continuously segments which have 
the following forms: 


J05 = [1000000111000000], J06 = [0000001110000001]. (69) 


Denote dooo to be the number of form (69) and mz = f'ix(dooo/(d — do — doo)). Then replace continuously 
segments (69) to the form: 


D05 — [1000001110000000], D06 — [0000000111000001] (70) 


by interval mə until all absent zero 5-runs have been generated if possible. If we cannot find enough J05's and 
J06’s defined by (69) to increase the number of zero 5-runs, we need to find continuously segments which have 
the following form: 


J07 = [1100000000001]. (71) 


Denote doooo to be the number of form (71) and ma = fix(2do000/(d — do — doo — doooo)). Then replace 
continuously segments (71) to the form: 


D07 = [1000001000001]. (72) 


by interval ma until all absent zero 5-runs have been supplied if possible. 
(c) If d 2 lj — 156 > 1. Find the segments which have the following forms: 


J11 = [01111101111111], J12 = [11111110111110]. (73) 


Denote dı to be the number of forms (73) and m = fix(d,/d). Then replace continuously segments (73) to the 
forms: 


D11 = [01111110111111], D12 = [11111101111110] (74) 


e = by interval m until all excess one 5-runs have been deleted if possible. If we cannot find enough J11’s and J12’s 
defined by (73) to reduce the number of one 5-runs, we need to find continuously the segments which have the 
< following forms: 


J13 = [111111100111110], J14 = [011111001111111]. (75) 


( \Denote dj, to be the number of forms (75) and mı = fix(di1/(d — d1)). Then replace continuously segments 
(75) to the forms: 


D13 = [111111001111110], D14 = [011111100111111] (76) 


= by interval mı until all surplus one 5-runs have been deleted if possible. If we cannot find enough J13’s and 
S 14's defined by (75) to reduce the number of one 5-runs, we need to find continuously segments which have 
"&he following forms: 


J15 = [1111111000111110], 716 = [0111110001111111]. (77) 


Denote dii; to be the number of forms (77) and mə = fix(dii1/(d — dı — di1)). Then replace continuously 
segments (77) to the forms: 


D15 = [111111001111110], D16 = [011111100111111] (78) 


by interval m» until all surplus one 5-runs have been deleted if possible. If we cannot find enough J15’s and 
J16’s defined by (77) to reduce the number of one 5-runs, we need to find continuously segments which have 
the following form: 


J17 = [0111110111110]. (79) 


Denote d1111 to be the number of forms (79) and ma = fix(2d1111/(d — dı — di, — d111)). Then replace 
continuously segments (79) to the forms: 


D17 = [0011111111110] (80) 
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by interval ma until all surplus one 5-runs have been deleted if possible. 
(d) If d= 156 — lı > 1. Find the segments which have the following forms: 


J11 = [01111110111111], 712 = [11111101111110]. (81) 


denote dı to be the number of forms (81) and m = fix(dı/d). Then replace continuously segments (81) to the 
forms: 


D11 = [01111101111111], D12 = [11111110111110] (82) 


by interval m until all absent one 5-runs have been supplied if possible. If there do not exit enough j01’s and 
j02's defined by (81) to increase the number of one 5-runs, we need to find continuously the segments which 
have the following forms: 


J13 = [011111100111111], J14 = [111111001111110]. (83) 


Denote di; to be the number of forms (83) and m, = fix(dı1/(d — d,)). Then replace continuously segments 
(81) to the forms: 


D13 = [011111001111111], D14 = [111111100111110] (84) 


— by interval mı until all absent one 5-runs have been generated if possible. If there do not exit enough j13's and 
7 j1's defined by (83) to increase the number of one 5-runs, we need to find continuously the segments which 
— have the following forms: 


J15 — [0111111000111111], 716 — [1111110001111110]. (85) 


., Denote d41; to be the number of forms (85) and mo = fix(dii1/(d — dı — dj,)). then replace continuously 


C segments (85) to the forms: 


D15 — [0111110001111111], D16 — [1111111000111110] (86) 


` ^ by interval m» until all absent one 5-runs have been generated if possible. If there do not exit enough j15's and 
(© j16’s defined by (85) to increase the number of one 5-runs, we need to find continuously the segments which 
£ have the following form: 


J17 = [0011111111110]. (87) 


Denote d1111 to be the number of forms (87) and m3 = fix(di111/(d—d1—d11—d311)). Then replace continuously 
segments (87) to the forms: 


D17 = [0111110111110] (88) 


by interval mg until all absent one 5-runs have been generated if Possible. 
Remark The 6th procedures might “reduce” the uniformities of other runs in order to guarantee better 
uniformity of 5-runs. 


(7) Reducing the numbers of Long Runs. 
We find over 26-bit segments which have the following forms: 


JO — [000000000000 - - - 00000000000000] 
J1 = [111111111111 --- 11111111111111] 
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and then the center zero and one by one and zero 
DO = [000000000 - - - 010 - - - 0000000000) 


and 


D1 = 111111111 --- 101 --- 111111111], 


respectively. 
(8) Improving the Poker test results for S. 
First let us remember the Poker test in the FIPS 140-2 test [7]. Assume the length of a binary sequence 


S is 20 000. Divide S into 5,000 consecutive 4-bit segments. Denote f(z) to be the number of each 4-bit with 
decimal value i — 1, where 1 < i € 16. Then calculate the statistic test item: 
(90) 


16 16 
N = — i)? — 5000. 
E000 3 f)? — 5000 


er 2.16 « N « 46.7. 


Second if S fails to pass the Poker test, we give an approach to improve the Poker test results for S. 


Denote the 16 different 4-bit segments as 
01,02,03,04,, 1 =0,1,--- , 15. 


Denote f(a1,,a2,,a3,04,) to be the number of the decimal vale of the 4-bit segment a ja» ;à3.;04 ; 


Case 1. If N « 2.16. 


If 
f (a1,a2,a3,04,4) < f (4,ja3,a2,54,;). 


If 


LÍ 


=Then substitute 41,192,143 1444 by 04,503,j02,501,5- 


f(a1,a2,03,a4,4) > f (a4, jaz jaz jag). 


“hen substitute G4,503,502,501,3 by 01,,02,,03,,04,- 


In this way substitute, in S, continuously the a1 402,103,104 45 and the 
a1, jaz jaz jay ,5 until N > 2.16 if possible. 

Case 2. If 46.7 > N 
If 


f (a1,02,03,a44) > f (a4, jas jan, jar, j). 
Then substitute 41 442493 1444 by 04,j03,502,501,j- If 

f (a1,;a2,;a3,a44) € f(a4,a3,a2,a1,;). 
'Then substitute G4,503,502,501,j by 01,,02,,03,,Q4,i 


In this way substitute, in S, continuously the 01,/02,,03,,04 ;5 and the 
03,j02,,03,;04 jS until N < 46.7 if possible. 
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In summary, we complete the procedures for improving the randomness of pseudorandom sequences based 
on FIPS 140-2 test criterions. 

Remark The 6th and 7th procedures will effect negative results to procedures (2)-(5). In practical applica- 
tions, we may meet the situation that one improving procedure (1-runs to 5-runs ) makes the later runs become 
worse such that them failed to pass FISP 140-2 test. In this case, we will give up the improving procedures for 
1-runs to 5-runs, that is, only implement the improving procedures for Monobit test, Pork test and Long Runs 
test. 


2.1 A new chaotic generalized synchronization system 


In order to design the CPRNG, we introduce a new 8-dimensional chaotic generalized synchronization system 
(8DCGSS). Firstly, the driving system of the 8DCGSS is the combination of the Henon map, the logistic map 
and the tube map [10]: 


( 
X(k+1) = 


1— 1.42 (k)? + x2(k) 
3.1523 (k)(1 — za (k)) 
6.8z4(k)(1 — z4(k))? 


I 
— 
Ne) 
mÓ 
— 


Written in a compact form, it is 
X(k +1) = F(X(k)). (92) 


© The calculated Lyapunov exponents of this system are (0.2543, 0.1411 — 0.7363 — 1.6339}. Therefore the 


* 8DCGSS will be a hyper-chaotic system. 


Secondly, construct an invertible matrix 


2 —1 —5 -4 
2 —5 —6 8 
rs -6 7 -5 -1 |’ (93) 


4 -6 —1 -6 


and define a transformation H : IR^ — R^ as follows 
H(X) = AX ( (X), h(X), hs (X), 40)". (94) 
Let q(X, Y) — 1/8(AX — Y). The driven system has the form 
Y (k +1) = A[F(X(K))] — a(X(K), Y(K)). (95) 
Then q(X, Y) makes the zero solution of error equation (96) to be asymptotically stable. 
e(k--1) = H(X(k-1)) — Y(k 1) 2 q(X, Y). (96) 


By the Theorem given in [8], the driving system (91) and the driven system (95) are in generalized synchro- 
nization with respect to the transformation H. 
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Now, select the following initial conditions: 
X(0) = (0, 0, 0.5, 0.2)", Y (0) = AX(0). (97) 


The chaotic orbits of the state variables £1, £2, £3, %4 and y1, Y2, ya, Y4 for the first 2,000 iterations are shown 
in Figs.1(a) - (d) and Figs.1(e) - (h), respectively. 


(a) (b) (c) 
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-2 
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igure 1: Chaotic trajectories of variables: (a) xi1(k) — ro(k) — za(k), (b) a1(k) — xa(Kk) — x4(k), (c) za(k) — 
wa(k) — yi(k), (d) za (k) — yı (k) — yolk), (e) gn (K) — yolk) — ys(k), and (f) ya(k) — y3(k) — y4(k). 


aXiv 


In 


= The evolution of state variables: k — xı (k), k — x(k), k — x3(k) and k — x4(k) are shown in Figs. 2(a) - (d). 

he evolution of state variables: k — y1(k), k — yo(k), k — ys(k) and k — y4(k) are shown in Figs. 3(a) - (d). 
Figures 4(a)-(d) show that the state variables X(k) and Y(k) are in GS with respect to the transformation 
H — A, as the theory predicts. Extensive simulations show that the dynamic behaviors of the GS system have 
chaotic attractor characteristics. 


2.2 A chaotic pseudorandom number generator 


Now we transform the chaotic streams generated by the 8DCGSS to binary key streams (denoted by K). Denote 


(98) 


Ci = {x2(k)|k = 1,2,---,N +500} 
C2 = {ys(k)|k =1,2,--- , N +500}, 


where xs and y4s are defined by (91) and (95). 
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Figure 3: The evolution of state variables: (a) k — yi(k), (b) k — ya(k), (c) k — y3(k), and (d) k — ya(k). 


Let 


mod (round( 


mod (round( 


1015 (Ci = min(Ci) 
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(C) = minc?) 
max(C1) — min(Ci 

10 (Cs — min(C3) 
maz(C2) — min(C2) 


), 2°), 


(a) (b) (c) (d) 


v -2 = 6 6 4 
5.5 ME PA 2 3 
-9 -8 -10 -10 


-9.5.52 -8 -1 6 -10-2 6 -10-3 4 
h (X(k)) h (X(k)) h (X(k)) h (X(k)) 


Figure 4: The state vectors X and Y are in generalized synchronization with respect to the transformation 
H. (a) hi(X(k))-yi(k), (b) ho(X(k))-ya(k), (c) ha(X(k))-y3(k), and (d) ha(X(k))-ya(k). 


y (k) 
y (I) 


Now we discard the fist 500 iterated sequences and define 
S,= mod (C1 + Co, 28), S = dec2bin(S, ),, (100) 


C where dec2bin is a Matlab command which converts decimal integer to its binary representation. Then the 
—Leystream K with length N is defined by 


K=S(:). (101) 


In summary, we design a CPRNG based on chaotic streams (98) and the transformations (99) - (101) 

The seeds of the CPRNG are the initial condition (97) of the GS systems with random perturbations, which 
Atan be chosen via random number generators. 

The key set parameters of the CPRNG include the initial conditions initial condition (X(0) , Y (0)), and 
C the parameters of matrix (93): A = (a;,;) . It can be proved that if the perturbation matrix A = (ô; j) satisfies 


|ô; jl < x 1.3091, 


1 
: 4| At || 
4 then matrix A + A is still invertible. Therefore the CPRNG has 4 + 4 + 16 key parameters denoted by 
K, = Un, ko, , koa}. (102) 
Let the key set be perturbed by 


K,(A) = K, S [ó1; 05, Pg 171 (103) 


where 
1075 < |ð] « 101, 4—1,...,24 


Now we compare the difference between the key stream S with 20 000 bits length generated by the key set 
(102) and the key streams Sps generated by the perturbed key set (103), respectively. The comparison results 
are shown in the third column in Table 1, where DC denotes the statistic value of the different codes, and CC 
the one of the correlation coefficients. 

The results show that the average percentage of different codes is about 50.029%, which is very closed to 
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Table 1: The statistic data for the percentages of the codes of the key stream CPRNG variations between S 
and Sis and S and Sps 


Ls Lm] 


Tem] 8V 
oin fa 
C [mean [ 50.029 % | 49.997 | 
ELCHE SENS 
gar 
max | 


the ideal value of 50%. And the mean of the correlation coefficients is about 0.5624. Now, compare the same 
key stream S with the 1000 key streams S/,s generated by the Matlab command randi({0 1], 1, 20000). The 
comparison results are shown in the fourth column in Table 1. Observed that the average percentage of different 
codes is about 49.997% and the mean of the correlation coefficients is about 0.5657. The results suggest that 
the key stream S$ has no significant correlations with the perturbed key streams 5,8. 

'The Matlab platform uses double-precision decimal computations, which means that each computed decimal 
number has 16 bits accuracy. In summary, the key space of the CPRNG is larger than 2 x 1014*?4 > 2117, 


:2.3 Improvements and measures of pseudorandomness for keystreams generated from 4 
PRNGs 


` This subsection will use the procedures posed in Section 2 to improve the pseudorandomness for the 1000 
keystreams with 20000 bits generated by 4 PRNGs, respectively. Then using FIPS 140-2 pseudorandomness 
test and GFIPS 140-2 pseudorandomness test evaluates the pseudorandomness of the original and the improved 
1000 keystreams with length 20 000 bits, respectively. 

FIPS 140-2 test issued by INST [7] consists of four sub-tests: Monobit Test, Poker Test, Runs Test and 
‘Long Runs Test. Each test needs a single stream of 20 000 one and zero bits from the keystream generator. 
- Any failure in the first three tests means that the corresponding quantity of the sequences falls out the required 

intervals listed in the second column in Table 2. If there are runs of length 26 or more, the Long Runs test fail. 

In a previous paper ([9]), we have pointed out that the required intervals of the Monobit test, the Poker test 
and the Runs test correspond to the confident intervals with significant levels: a = 1074, 1074 anda © 1.6x1077 
(approximately), respectively. The confident intervals for the runs test with significant levels: a = 1.6 x 1077 
are listed in the third column in Table 2. Observe that they are slightly different form the corresponding 
required intervals of FIPS 140-2 runs test. Therefore the required intervals of the run tests given by FIPS 140-2 
are not reasonable. 

The accepted intervals of the runs test with significant levels: a = 1074 are listed in the 4th column in 
Table 2. We called the accepted intervals as GFIPS 140-2 test (criterions). Observe that the accepted intervals 
are much small than the corresponding required intervals of the FIPS 140-2 runs test. 

According to Golomb's three postulates on the pseudorandomness that ideal pseudorandom sequences 
should satisfy [6], the ideal values of the first three tests are listed in the 5th column in Table 2. 


(1) Improvements and Tests of Pseudorandomness for Keystreams generated from the CPRNG 


First, using the CPRNG with perturbed randomly initial condition (X(0), Y (0)) (see (97)), and the 
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Table 2: The required intervals of FIPS 140-2. The accepted intervals with significant levels: a = 1.6 x1077, 
and 1074 for Monobit Test, Poker Test and Runs Test. The Golomb's assumptions require values. Here MT, 
PT, LT, and RT represent the Monobit Test, the Poker Test and the Long Runs Test, and the Runs test. k 
represents the length of the run of a tested sequence. 


'Test | FIPS 140-2 Standard a —10 ^ o -—10* Golomb's 
m 
— «3x — [— «x o a To 


FIPS 140-2 Standard a=1.6 x 107 a= 10 Golomb’s 
Required Intervals Accepted Intervals | Accepted Intervals | Postulates 


527~723 532~718 556~694 625 


parameters of matrix (93) in the range e € [10716, 107?] generates 1000 keystreams with 20 000 bit length. 

Second, using FIPS 140-2 criterions and GFIPS 140-2 criterions tests the 1000 keystreams. The results 
show that all sequences successfully pass FIPS 140-2 test and there are 17 sequences failing to pass GFIPS 
140-2 test (in three sequnces, two different test items failed to pass the test, respectively). The calculated 
results are listed in the 3rd column in Table 3, in which the statistic results of all tests are described by mean 
values + standard deviation (Mean + SD). 

Third, using the 7 procedures posed in Sections 2 deals with the 1000 keystreams. And then using 
FIPS 140-2 criterions and GFIPS 140-2 criterions tests the improved 1000 keystreams. The results show that 
all 1000 sequences pass the FIPS 140-2 test, and there are only 1 sequence failing to pass GFIPS 140-2 test. 
The calculated results are listed in the 3rd column in Table 4. 


The numbers of the runs of the original and the improved 1000 streams which fail to pass GFIPS 140-2 
criterions are shown in the 3rd column in Table 5. Observe that the pseudorandomness of the improved 1000 
keystreams is significantly better than that of the original 1000 keystreams. 


(2) Improvements and Tests of Pseudorandomness for Keystreams Generated from Matlab 
PRNG 

First, using the Matlab command randi([0,1], 1000, 20000) generates 1000 keystreams with 20 000 bit 
length. And then using FIPS 140-2 criterions and GFIPS 140-2 criterions tests the 1000 keystreams. The 
results show that all sequences successfully pass FIPS 140-2 test and there are 30 sequences failing to pass 
GFIPS 140-2 test (in one sequnce, two different test items failed to pass the test). The calculated results are 
listed in the 4rd column in Table 3, 

Second, using the 7 procedures posed in Section 2 deals with the 1000 keystreams. And then using FIPS 
140-2 criterions and GFIPS 140-2 criterions tests the improved 1000 keystreams. The results show that the 
all improved 


1000 keystreams pass both FIPS 140-2 test and GFIPS 140-2 test . The calculated results are listed in the 4th 
column in Table 4. 
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Table 3: The Mean + SD of FIPS 140-2 tested values for 1000 key streams with 20 000 bits generated by the 
CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. Here, MT, PT and LT 
represent Monobit Test, Poker Test, and Long Runs Test. 


CPRNG 
Mean + SD 
10003+72.06 

9996.60+72.06 


Test bits 
item 
0 


9999.8 


PPT | -| 1516:5.08 - 


1251.84 
1250.3 


624.3+23.41 
625.1+23.03 
311.8+16.87 
312.3+15.54 


156.7+11.83 
156.1411.86 


10001+69.78 
9999.1--69.78 


13.6341.84 
13.6741.82 
Run Test 


1250.14 
1251.64 


Matlab RC4 m-sequence 
Mean + SD Mean + SD Mean + SD 


9997.7+68.10 
10002.33-68.10 


13.2341.68 
2500.44 
2500.74 
1250.34 


1249.44 


312.2+17.38 
312.4+16.06 
156.7+12.06 
156.62-11.34 
155.5+10.19 
156.2+10.72 


Table 4: The Mean + SD of FIPS 140-2 tested values for the improved 1000 key streams with 20 000 bits 
generated by the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. 


Test bits 
item 
0 


CPRNG 
Mean + SD 
10001+2.31 
9999.5 +2.31 


Matlab 
Mean + SD 


RC4 
Mean + SD 
10000+2.29 
9999.5+2.29 


m-sequence 
Mean + SD 
10000.4+2.13 
9999.6+2.13 


| PT | - | 13.0745.32 | 12.8545.39 | 12.79£5.04 | 11.765914 


1 


EXE 
0 
CE 


0 | 156.2 £11.56 
~ | 0 | 155.0£10.81 


623.6£13.78 
625.3415.10 
314.91-16.53 


313.1+16.43 


13.643-1.83 13.63+1.84 
13.63+1.90 13.61£1.75 


2501.9+9.08 
2501.8+10.48 


-1.60 
-1.87 


2501.14 14.21 
2500.1415.16 


623.3+14.10 
623.9+13.95 
315.2+13.95 
313.4+15.42 
156.1412.20 
154.2+10.44 
155.8+9.80 
157.4+9.47 


The numbers of the runs of the original and the improved 1000 streams which fail to pass GFIPS 140-2 
criterions are shown in the 4rd column in Table 5. Observe that the pseudorandomness of the improved 1000 
keystreams is significantly better than that of the original 1000 keystreams. 


(3) Improvements and Tests of Pseudorandomness for Keystreams from RC4 Algorithm 
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Table 5: The numbers of the runs of the original and the improved 1000 streams which fail to pass GFIPS 
140-2 criterions. Here FN represents failed number. 


CPRNGTN [Matlab FN ROIN 
| | . [|orignial/improved | orignial/improved | orignial/improved | orignial/improved 


Poi] w | w | w | mw | 
0/0 0/0 0/0 7/0 

a 1 9 — [99 — [99 ——L 36 
0/0 0/0 0/0 0/0 


2/0 2/0 3/0 7/2 
[|| w | w | w | n | 


ep mæ | m | w | w | 
epl m | m | m | m | 
spl w | w [ s | e 
>fl w | m | m | p | 


The Matlab program for RC4 algorithm is described in Fig. 5. First, using the above command generates 
1000 keystreams with 20 000 bit length. And then using FIPS 140-2 criterions and GFIPS 140-2 criterions 
tests the 1000 keystreams. The results show that all 1000 sequences pass FIPS 140-2 test, and there are 30 
Sequences failing to pass GFIPS 140-2 test (in one sequnce, two different test items failed to pass the test). 
The calculated statistic results are listed in the 5th column in Table 3. 


Second, using the 7 procedures presented in Section 2 deals with the 1000 keystreams. And then using 
FIPS 140-2 criterions and GFIPS 140-2 criterions tests the improved 1000 keystreams. The results show that 
the all improved 1000 keystreams pass FIPS 140-2 test. There are 6 sequences failing to pass GFIPS 140-2 
test. T'he calculated results are listed in the 5th column in Table 4. 


The numbers of the runs of the original and the improved 1000 streams which fail to pass GFIPS 140-2 
criterions are shown in the 5th column in Table 5. Observe that the pseudorandomness of the improved 1000 
keystreams is significantly better than that of the original 1000 keystreams. 
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clear all 
L-8; 
RC-randi([0,2^L-1], 1000,2^1); 
Keystream(1000,20000)20; 
L-8; 
for J=1:1:1000 
j=0; 
S=[0:2^L—1]; 
for i-1:2^L 
j=mod(j+S (1)-RC(J,i),2^L); 
Sk=S (j+1); 
S(j+1)=S (i); 
S(i)-Sk; 
end 
j20;i-20; 
C(1,20000/8)=0; 
for 1=1:20000/8 
i-mod(i-*1,2^L); 
jemod(j*S(i*1),2^1); 
Sk-S (j*1); 
S (j+1)=S(i+1); 
S (i+1)=Sk; 
C(1)=S (mod (S (j+1)+S(i+1),2^°L)+1); 
end 
M= (dec2bin(C))'; 
M=(M(:)—48)'; 
Keystream (J, :)=M; 
end 


Fig. 5. RC algorithm written by Matlab program. 


(4) Improvements and Tests of Pseudorandomness for Keystreams Generated from an m- 
Sequence 


The m-sequences are binary bit sequences generated via maximal linear feedback shift registers. The 
occurrences of 0 and 1 in an m-sequence with one period length satisfy Golomb’s three postulates on the 
randomness. 


Every m-sequence corresponds to a polynomial representation. Now we choose an m—sequence with the 
form 


qo dat aT. (104) 


'The 1000 keystreams with 20 000 bit generated by this m-sequence can be implemented by the Matlab program 
shown in Fig. 6. 
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clear all 
X1-randi (1000,20); 
Keystream(1000,20000)20; 
for J=1:1000 
k=1; 
while k<=20000 % 
uu=mod ( (X1(20)+X1(3)),2); 
X (k) =uu; 
X1-[uu X1(1:end-1)]; 
k=k+1; 
end 


Keystream (J, :) =X; 


end 


Fig. 6. m-sequence written by Matlab program. 


First, using FIPS 140-2 criterions and GFIPS 140-2 criterions tests the 1000 m-sequence keystreams with 

20 000 bits. The results show that there are 28 sequences failing to pass FIPS 140-2 test (in two sequences, 
two different test items failed to pass the tests, respectively; in five sequences, three different test items failed 

Go pass the tests, respectively); there are 44 sequences failing to pass GFIPS 140-2 test (in six sequences, two 
different test items failed to pass the tests, respectively; in two sequences, three different test items failed to 
pass the tests, respectively; in three sequences, six different test items failed to pass the tests, respectively) . 
The calculated statistic results are listed in the 6th column in Table 3. Such unexpected results imply that the 
pseudorandomness of the first 20 000 bits of m-sequences is much worse than that of other three PRNGs. 

Second, using the 7 procedures posed in Section 2 deals with the 1000 keystreams. And then using FIPS 
‘140-2 criterions and GFIPS 140-2 criterions tests the improved 1000 keystreams. The results show that that 
there are 14 sequences failing to pass FIPS 140-2 test, and there are 17 sequences failing to pass GFIPS 140-2 
«test (in one sequence, two different test items failed to pass the tests; in three sequences, three different test 
= items failed to pass the tests, respectively). The calculated results are listed in the 6th column in Table 4. The 
numbers of the runs of the original and the improved 1000 streams which fail to pass GFIPS 140-2 criterions 
are shown in the 6th column in Table 5. Observe that the pseudorandomness of the improved 1000 keystreams 
“Us significantly better than that of the original 1000 keystreams. 

In summary, the improved keystreams of the four pseudorandom number generators can significantly in- 
crease the pseudorandomness of the corresponding original keystreams. In particularly, the numbers of failing 
to pass the two test can be decreased significantly (see Tables 5 and 6). 


Table 6: Failing sequence numbers. Here, FIPS/GFIPS represent the failing numbers of the sequences which 
cannot pass FIPS 140-2 test and GFIPS 140-2 test. 


| [Orisinal Sequences | Improved Sequences | 
PRNG FIPS/GFIPS FIPS/GFIPS 
CPRNG 


0/30 
RCA 0/30 
28/45 14/8 
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2.4 Improvements and measures of pseudorandomness for keystreams with length 1e5 
generated from 4 PRNGs 


This subsection will use the procedures posed in Section 2 to improve the pseudorandomness for the 1000 
keystreams with 100 000 bits generated by the 4 PRNGs, respectively. Then use FIPS 140-2 randomness 
criterions and GFIPS 140-2 pseudorandomness criterions evaluate the pseudorandomness of the original and 
the improved 1000 keystreams, respectively. 

In a previous paper ([9]), we have pointed out that the required intervals of the Monobit test, the Poker test 
and the Runs test correspond to the accepted intervals with significant levels: a = 1074, 1074 and a z 1.6x 1077 
(approximately), respectively. The accepted intervals for the runs test with significant levels: a = 1.6 x 1077 
are listed in the third column in Table 2. Observe that they are slightly different form the corresponding 
required intervals of FIPS 140-2 runs test. Therefore the required intervals of the run tests given by FIPS 140-2 
are not reasonable. 

As the statements given in 3.3 subsection and the formulas posed in paper ([9]), the accepted intervals of 
FIPS 140-2 test and GFIPS 140-2 test for 100 000 bite codes are listed in Table 7. 

Now, using the 7 procedures posed in Section 2 deals with the 1000 keystreams with length 100 000 bits. 

(1) For the CPRNG, there were 2 original sequences and 37 original sequences failing to pass FIPS 140-2 


~ test and GFIPS 140-2 test, respectively. There were 0 improved sequences and 2 improved sequences failing to 


em pass FIPS 140-2 test and GFIPS 140-2 test, respectively. 

= (2) For the Matlab PRNG, there were 2 original sequences original sequences failing to pass FIPS 140-2 test 
3 and and 31 original sequences failing to pass GFIPS 140-2 test (in five sequences, two different items failed to 
) pass the tests, respectively), respectively. There were 0 improved sequences and 3 improved sequences failing 
sto pass FIPS 140-2 test and GFIPS 140-2 test, respectively. 

(3) For the RC4 algorithm, there were 0 original sequences failing to pass FIPS 140-2 test, and 34 original 


A ¿sequences and GFIPS 140-2 test (in one sequences, two different items failed to pass the test, respectively). 


J There were 0 improved sequences and 4 improved sequences failing to pass FIPS 140-2 test and GFIPS 140-2 


© test, respectively. 


N (4) For the m-sequence, there were 15 original sequences and 37 original sequences failing to FIPS 140-2 
test and GFIPS 140-2 test, respectively. There were 13 improved sequences and 18 improved sequences failing 
~ to pass FIPS 140-2 test and GFIPS 140-2 test, respectively. 
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Table 7: The accepted intervals for 100 000 bit sequences with significant levels: a = 1.6 x1077, and 1074 for 
Monobit Test, Poker Test and Runs Test. The Golomb’s randomness assumptions required values. Here MT, 
PT, and LT represent the Monobit Test, the Poker Test and the Long Runs Test. k represents the length of 
the run of a tested sequence. 


FIPS 140-2 GFIPS 140-2 Golomb's 

LIN 
M 
P 
w| æ | «æ |] — | 

Ru = 

Postulates 


Golomb 
s : 


Table 8: Failing numbers. Here, FIPS/GFIPS represent the failing numbers of the sequences which cannot 
pass the FIPS 140-2 test and the GFIPS 140-2 test. 
O o T Original SQ [ Tmproved SQ | 


0/34 
15/37 


The calculated results are summarized in Table 8. The detailed statistic results are summarized in Table 9 - 
Table 11. Observe that the first three PRNGs can generate sound pseudorandom key streams in the meanings 
in the sense of Golomb’s randomness postulates. The presented new approach can increase significantly the 
pseudorandomness of the keystreams generated the four PRNGs. The m-sequence cannot generate good key 
streams whose lengths are less than 100 000 bits. 


2.5 Improvements and measures of pseudorandomness for keystreams with length 10° 
generated from 4 PRNGs 


This subsection will use the procedures posed in Section 2 to improve the pseudorandomness for the 1000 
keystreams with 1e6 bits generated by the 4 PRNGs, respectively. Then use FIPS 140-2 pseudorandomness 
criterions and GFIPS 140-2 pseudorandomness criterions to evaluate the pseudorandomness of the original and 
the improved 1000 keystreams, respectively. 
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Table 9: The Mean + SD of FIPS 140-2 tested values for 1000 key streams with length 1e5 bits generated by 
the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. Here, MT, PT and 
LT represent Monobit Test, Poker Test, and Long Runs Test. 


Test bits 
item 
0 
| 


PPT [| 15095535 


0 


0 


0 
3 


o [or m 
4 


CPRNG 
Mean + SD 
49 999 + 155.29 
50 001 4155.29 


Run Test 
12 502 +106.04 
12 5034107.72 
6247.7 + 70.65 
6246.3 + 70.83 


1563.2 +36.40 
1562.7 + 37.87 
780.73 + 27.24 
781.16 +27.72 
781.54 d 
781.75 4 


Matl 


ab 


Mean + SD 
500 07 £158.82 
49 993 4158.82 


Run 


15.3745.66 


Test 


12 495+106.54 | 12 496 +101.96 
12 499+103.44 | 12 496 +105.41 


6252.1+72.07 


6251.9 


70.37 


3125.6 + 51.80 
3124.6+50.11 


780.55 4 


-21.39 


782.12+27.59 


RC 
Mean + SD 
50 000 +155.99 
50 000 +155.99 


Run Test 


6249.4 d 
6250.33: 75.54 
3124.8 + 51.91 
3121.4 + 52.77 
1561.6 + 37.03 
1564.5 + 37.66 
782.43 + 26.42 
782.64 + 27.00 
781.28 425.40 
781.09 +26.05 


m-sequence 


Mean + SD 


50 007+146.37 
49 9934146.37 


14.91+5.29 14.81+9.75 


12 5024 
12 504+ 


781.44 4 
780.95 + 


Golomb’s 
Postulates 
50 000 


Table 10: The Mean + SD of FIPS 140-2 tested values for improved 1000 key streams with length 1e5 
generated by the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. 
Matlab 
Mean + SD 
50 000 +£5.38 
50000 +5.38 


Test bits 


me 
ct 


ja 


S 


(ez 
d 


CPRNG 
Mean + SD 
50 000 + 5.54 
50000 + 5.54 


15.97+1.86 

Run Test 
12 505 428.97 
12 505 +29.59 
6246.1+ 24.62 
6248.2 + 28.33 
3123.8 + 23.91 
3126.8 + 26.06 
1560.84 
1557.84 
785.544 
776.034 
780.464 
787.654 


15.81+1.79 


13.07+5.16 13.085.26 


15.86+1.82 


15.92+ 


1.84 


12 504+29.67 
12 504+27.09 


6246.1 4 
6249.1 4 
3122.4 + 


22.85 


3125.3+24.46 


785.62 + 
775.60 +20.89 


19.32 


2 


RC 
Mean + SD 


49 999 + 4.10 
4289.2--495.82 
14.55+5.43 
15.97+ 1.92 
15.79+1.84 


12 502 +29.918 
12 503 431.82 
6245.7 £28.31 
6247.3 4 
3123.3 + 28.48 
3124.6 + 27.42 
1559.0 + 40.34 
1555.7 + 37.908 
785.78 + 20.33 
778.06 + 20.65 
181.854 
789.104 


5 


m-sequence 
Mean + SD 
49 999 4 
50001 


12 5044 
12 502+ 


6246.34 
3118.4 4 
3125.5 + 
1562.34 
1553.34 
785.55 21.37 
775.64 26.58 
783.14 27.06 
792.72 +27.09 


Golomb’s 
Postulates 


Table 11: The numbers of the runs of the original and the improved 1 000 streams which fail to pass GFIPS 
140-2 criterions. Here FN represents failed number. 


Test | bits CPRNG FN Matlab FN RC4 FN m-sequence FN 
| |  einisifmoreed | orgiat/mproe | orgial/inproved | origniat/improvea | 
0/0 0/0 0/0 0/0 
[»wr| | yo 1] o [| 90 | o 
1 1/0 0/0 0/0 0/0 


4/0 3/0 2/0 3/0 
ohl w | æ | a | w | 


efil w | m | w | w | 
>p x» | m | s | m | 
spl x0 | m | w | p | 
Spil w | n | w | p | 


As the statements given in 3.3 subsection and the formulas prosed in paper ([9]), the accepted intervals of 
FIPS 140-2 test and GFIPS 140-2 test for 1e6 bite codes are listed in Table 12. 

Now, using the 7 procedures posed in Section 2 deals with the 1000 keystreams with length 1e6 bits for the 
4 CPRNGs, respectively. (1) For the CPRNG, there were 9 original sequences and 41 original sequences 
failing to pass FIPS 140-2 test and GFIPS 140-2 test, respectively. There were 0 improved sequences failing to 
pass FIPS 140-2 test, and 8 improved sequences failing to pass GFIPS 140-2 test (in one sequence, two different 
items failed to pass the test, respectively), respectively. 

(2) For the Matlab PRNG, there were 8 original sequences and 49 original sequences (in three sequences, 
there are two different items not to pass the tests, respectively) failing to pass FIPS 140-2 test and GFIPS 
140-2 test, respectively. There were 0 improved sequences and 8 improved sequences (in two sequences, there 
are two different items not to pass the tests, respectively) failing to pass FIPS 140-2 test and GFIPS 140-2 
“test, respectively. 

(3) For the RC4 algorithm, there were 12 original sequences and 34 original sequences (in one sequence, 
there are two different items not to pass the tests) failing to pass FIPS 140-2 test and GFIPS 140-2 test, 
respectively. There were 1 improved sequences and 3 improved sequences failing to pass FIPS 140-2 test and 
GFIPS 140-2 test, respectively. 

(4) For the m-sequence, there are 9 original sequences failing to pass FIPS 140-2 test, and 41 original 
sequences failing to pass GFIPS 140-2 test. All improved sequences pass FIPS 140-2 test and GFIPS 140-2 
test, respectively. 

Table 13 summaries the above results. The detail statistic test results for the 4 PRNGS are summarized in 
Table 14~16. 

From Tables 3, 9 and 14, it follows that the pseudorandomness of the original codes of the CPRNG, the 
Matlan PRNG, and the RC4 algorithm become better when the lengths of the codes becomes longer (see (mean 
value + std value - idea value) /(idea value) ); the pseudorandomness of original codes of the m-sequence become 
much better when the lengths of the codes equal to 1e6 (see (mean value + std value - idea value) /(idea value)). 

From Tables 4, 10 and 15, it follows that the pseudorandomness of the improved codes of the CPRNG, the 
Matlan PRNG, and the RC4 algorithm become better when the lengths of the codes becomes longer. The 
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Table 12: The accepted intervals for 100 000 bit sequences with significant levels: a = 1.6 x107", and 1074 
for Monobit Test, Poker Test and Runs Test. The Golomb's randomness assumptions required values. Here 
MT, PT, and LT represent the Monobit Test, the Poker Test and the Long Runs Test. k represents the 
length of the run of a tested sequence. 


Test FIPS 140-2 GFIPS 140-2 Golomb’s 
Item Postulates 
ae ee ee IN ON 
[| sz16x1r' | a=" | - 


[ k | Rus Test [Rms Test | — — | 


Table 13: Failing numbers. Here, FIPS/GFIPS represent the failing numbers of the sequences which cannot 
pass the FIPS 140-2 test and the GFIPS 140-2 test. 


Original SQ | Improved SQ 
PRNG FIPS/GFIPS | FIPS/GFIPS 


| CPRNG | 94 | | | 0/4 | 


a 
2/54 
yii 


 pseudorandomness of original codes of the m-sequence become excellent when the lengths of the codes equal to 
1e6. Tables 13 - 16 show clearly that the improved codes increase significantly the pass rates of GFIPS 140-2 
criterions. 


3 Conclusions 


'The main contributions of this paper are concluded as follows. 


(1) Based on Golomb's assumptions on idea pseudorandom sequences, presented a general approach for im- 
proving pseudorandomness of pseudorandom sequences. 


(2) Used the Henon map, the logistic map the tube map and the GS theorem to construct a 8-dimensional 
generalized synchronization system and implemented numerical simulations. 


(3) Used the 8-dimensional generalized synchronization system designs a chaotic pseudorandom number gen- 
erator (CPRNG). The key space of the CPRNG is larger than 2!!!7, 


27 


Table 14: The Mean + SD of FIPS 140-2 tested values for 1000 key streams with length le6 bits generated by 
the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. Here, MT, PT and 
LT represent Monobit Test, Poker Test, and Long Runs Test. 


Test | bits CPRNG Matlab RC 
item Mean + SD Mean + SD Mean + SD 
500 002 + 484.84 


m-sequence 
Mean + SD 

500 000+112.26 

500 000+112.26 
11.56--2.96 


Golomb's 
Postulates 
500 000 


Run Test 


125 000 


500 013 + 511.31 | 500 003 + 506.44 

499 987 + 511.31 499 997 +506.44 | 499 998 + 484.84 

[PT — | 1915541 | 151569 1154:516 | 

t 1.84 19.27+1.85 19.28+1.88 

t 1.96 19.19+ 1.83 19.2741.95 
124 997+333.97 125 000 +330.79 
124 993+314.96 125 014 +337.81 
62 508+230.51 62 505 £288.61 
62 518+221.76 62 494 4225.59 
31 253 + 166.43 31 253 + 161.39 
31 246 + 164.71 31 247 + 162.37 
15 623 + 118.15 15 620 + 118.75 
15 627 + 117.47 15 622 + 118.38 
7814.2 +82.26 7814.4 + 84.62 
7811.7 £87.13 7809.4 + 84.61 
7808.9 +82.72 7811.9 +84.45 
7809.0 +84.92 7817.5 3:82.30 


Run Test 
125 000 +74.95 
124 999 +71.17 
62 499 +53.41 
62 501 +45.70 
31 250 + 37.59 
31 250 + 33.16 
15 624 +30.04 
15 624 +24.98 
7812.6 J 
7812.9 J 
7813.0 4 
7812.9 J 


124 996 + 318.03 
125 002 + 330.64 
- 228.89 
+ 231.00 
1163.4 
31 247 + 165.6 
- 118.26 
15 625 +121.04 
7810.6 + 85.31 
7811.1 £85.88 
7811.9 + 84.35 
84.30 


Table 15: The Mean + SD of FIPS 140-2 tested values for improved 1000 key streams with length 1e6 
generated by the CPRNG, the Matlab PRNG, the RC4 algorithm, and the m-Sequence, respectively. Here, 


MT, PT and LT represent Monobit Test, Poker Test, and Long Runs Test. 


Test 
ite 


bits 
m 
0 


| PT |- |  128245.12 12.7755.21 12.46£4.90 11.48£2.93 


bits 


iT 
1 
3 
5 
6* 


0 
1 
| bits | 
0 
1 
0 
1 
0 
1 
0 
1 
0 
1 
0 
1 


CPRNG 
Mean + SD 
499 998+10.86 
500 001 +10.86 


19.1841.75 

19.18--1.78 

Run Test 
125 001+101.12 
125 000+100.69 
62 499+ 98.39 
62 506 £111.45 
31 236 + 85.61 
31 265 + 80.83 
15 650+116.14 
15 599+117.99 
7819.64 
7800.94 
7797.24 
7832.94 


Matlab 
Mean + SD 
499 998 £12.48 
500 001 12.48 


19.22+1.74 
19.10+ 1.70 
Run Test 
125 000 + 97.81 
125 003 + 91.02 
62 501 + 103.84 
62 507 + 95.14 
31 236 + 91.26 
31 264+85.79 
15 6534121.87 
15 596+116.47 
7822.1 2.84 


7799.5 3:54.23 
7794.32 
7835.92 
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RC4 
Mean + SD 
499 999 + 11.38 
500 00111.38 


19.19+ 1.70 
19.19+1.72 
125 004 +84.75 
125 001 +105.62 
62 497 +98.56 
62 506 +95.76 
31 235 + 83.67 
31 270 + 79.85 
15 645 + 120.20 
15 597 + 120.93 
7822.7 + 43.89 
7796.0 + 56.54 
780 3.37 


7834.8482.33 


m-sequence 
Mean + SD 
5000 000 +0 
5000 000 +0 


18.95+0.25 

19.90+0.43 

Run Test 
125 002+3.63 
125 0001.02 
62 500+4.69 
62 501+4.99 
31 248+ 5.85 
31 253 + 7.91 
15 628+49.35 
15 621+43.19 


7813.6 £4.33 
7810.6 +8.49 


Golomb’s 
Postulates 


500 000 


x DT 
12 5000 
62 500 
31 250 
15 625 


7813 
7813 


Table 16: The numbers of the runs of the original and the improved 1000 streams with length 1e6 which fail 
to pass GFIPS 140-2 criterions. Here FN represents failed 


Test bits CPRNG FN Matlab FN RC4 FN m-sequence FN 
[S [PS | eit improved | orienini/anprovea | orgia /mprored | crgismpswet 
0/0 0/0 0/0 0/0 
[»r|-]| e — Veo | wo | 90  - 
ESI w | mæ | w | w 
6/0 3/0 5/0 6/0 


Opti | 0 0/1 6/0 1/1 0/0 
ji so | w | w | w 


0/1 4/1 2/0 0/0 
(4) The numerical simulations show that the correlations between the keystream S generated by the CPRNG 
and the 1000 keystream $55 generated by the CPRNG with perturbed keys are similar to those between 
S and 1000 keystreams generated by the Matlab PRNG. This implies that the keyspace of the CPRNG is 
large enough to against brute-force attacks. 


(5) Our approach can increase significantly the pseudorandomness of the keystreams generated the four 
PRNGs. In particularly, the numbers of the improved pseudorandom sequences failing pass the GFIPS-140 
test can be decreased significantly (see Tables 3-6, Tables 8 -11 and Tables 13 -16) . 
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(6) The m-sequence with period cannot generate good key streams whose lengths are less than 100 000 


bits. 


In summary, the proposed approach provides a new tool for improving the pseudorandomness of pseudoran- 
dom sequences. Using the presented approach can obtain high quality pseudorandom sequences. Researches 
along this line are promising. 


Note 
This version has be submitted to the proceedings of the 14th Chaotic Modeling and Simulation International 


Conference, Heraklion, Crete, Greece, 13 — 16 June, 2023. 
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